As a Google Workspace admin, you can modify routing behavior for email messages that require secure transport. Use the Alternate secure route setting to specify a secure fallback route. If you use a third-party encryption service, you can use this setting to route non-secure traffic to your encryption service.
Important: Before you specify a fallback mail route with the Alternate secure route setting, you must first add one or more mail routes to the Hosts setting. When you add mail routes, be sure to add a host that supports the level of TLS delivery that you require for your email.
Create an alternate secure route for your domain
In the Admin console, go to Menu AppsGoogle WorkspaceGmailRouting.
- On the left, select the top-level organization.
- Scroll to the Alternate secure route setting and click Edit .
- Check the Use an alternate route when secure transport is required box.
- Under the box, select the alternate route from the list.
- All messages requiring secure transport to hosts that don't use TLS are sent over the selected route.
- To add a route as an option in the list, add the mail route with the Hosts setting.
- Click Save
Changes can take up to 24 hours but typically happen more quickly. Learn more
To track changes, go to the Admin audit log.